Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: 5QfFuC9qkj9FV8+VZ1TihM/gtgkxc2v1kkfprTtPDGs=
Subject key identifier: F3:50:94:FF:81:BB:BE:31:1F:35:60:30:3D:D6:BB:DD:9B:DD:05:DA
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019CCAF64BF2D1525337D2C0BDBFE1F869C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 039C
Signing time: Sun 08 Mar 2026 01:01:04 +0000
Manifest this update: Sun 08 Mar 2026 01:01:04 +0000
Manifest next update: Mon 09 Mar 2026 01:01:04 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: RxdqCT6qfjvWhLD38bYbK+Clc0hC13JGNKevj7TCmxU=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:f6:4b:f2:d1:52:53:37:d2:c0:bd:bf:e1:f8:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Mar 8 01:01:04 2026 GMT
Not After : Mar 9 01:01:04 2026 GMT
Subject: CN=f35094ff81bbbe311f3560303dd6bbdd9bdd05da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:3a:0b:fb:2d:ea:a0:ca:f4:02:2d:54:17:
23:ce:07:08:90:7f:97:90:22:1a:ba:30:2b:e1:b0:
31:53:ed:9d:53:d7:8c:9b:60:21:c9:42:99:7d:c0:
34:e7:6a:95:9d:3c:2b:8d:8f:7e:5d:86:48:cc:3f:
e2:c8:8c:56:c1:8a:f5:e6:ef:1d:c8:f4:75:28:a1:
d9:02:0a:f2:a9:54:96:35:21:51:7b:a7:fc:90:00:
48:81:39:f8:25:36:27:47:b3:8a:b4:e9:2c:28:92:
9d:6a:45:e3:59:c8:2e:74:60:c0:20:e6:16:04:3f:
3c:20:9e:e8:b3:75:f5:04:8d:bb:67:9d:72:15:a7:
03:32:a0:ab:15:e5:6c:a9:a3:05:5c:f3:6a:2d:bc:
fd:c0:55:9a:ea:d8:fc:44:7c:44:1b:c9:e0:5b:15:
d9:7e:77:7a:11:4d:be:0d:5f:42:27:84:52:ee:fe:
c7:3b:b2:ea:a2:43:58:70:69:a8:de:63:66:46:ae:
77:75:58:98:6c:81:ba:ff:26:ef:f8:9e:18:2e:2c:
5f:00:cc:d6:da:d2:c1:5d:9b:a9:77:9f:3e:c3:c0:
8b:9a:ed:b6:b0:7c:c4:d5:d8:fd:39:bc:c0:47:da:
2d:24:de:1b:c2:2c:92:01:73:0c:2e:fc:42:ae:57:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:94:FF:81:BB:BE:31:1F:35:60:30:3D:D6:BB:DD:9B:DD:05:DA
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:84:29:4a:dc:9b:58:11:12:7a:36:4f:63:38:9f:cb:50:b5:
3a:02:a5:33:ec:63:58:b5:64:d6:09:e0:7c:90:11:b1:98:b9:
57:85:9e:39:f5:73:ed:75:3c:26:30:06:5a:aa:6b:5b:9b:40:
55:c6:63:65:14:00:66:77:66:4c:45:06:97:f6:cd:65:41:1e:
3c:ee:44:ba:59:38:4b:b7:aa:5f:94:8c:56:89:ff:91:de:28:
e1:eb:15:9f:a9:91:22:9b:54:7b:58:83:e3:db:18:25:55:e3:
ee:c9:73:cf:a1:d4:00:bc:7b:e1:f1:9f:e1:83:5b:5b:d8:4e:
5c:36:ae:d1:dc:32:4d:7b:9c:81:2a:d0:5a:64:72:5b:7f:55:
d7:48:1f:14:db:50:2f:17:15:e1:0b:9e:72:c9:99:ab:44:80:
38:41:78:01:bf:da:b8:cc:91:da:7f:bb:52:02:5c:e2:0b:32:
b3:59:b8:93:e4:df:ef:1d:6d:9f:f2:1b:bd:dd:a3:03:61:5c:
e6:a6:ac:1b:ec:21:99:fa:00:d9:ae:41:2a:61:a7:a6:8d:6b:
a1:04:cc:60:06:b0:75:a0:3a:ed:45:d1:80:9a:ac:5c:f8:c3:
c9:36:54:2e:10:66:24:32:72:90:bf:17:29:4e:9e:f0:f7:1b:
a4:68:4f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzK9kvy0VJTN9LAvb/h+GnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjYwMzA4MDEwMTA0WhcNMjYwMzA5MDEwMTA0WjAzMTEwLwYDVQQD
EyhmMzUwOTRmZjgxYmJiZTMxMWYzNTYwMzAzZGQ2YmJkZDliZGQwNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzs6C/st6qDK9AItVBcjzgcIkH+X
kCIaujAr4bAxU+2dU9eMm2AhyUKZfcA052qVnTwrjY9+XYZIzD/iyIxWwYr15u8d
yPR1KKHZAgryqVSWNSFRe6f8kABIgTn4JTYnR7OKtOksKJKdakXjWcgudGDAIOYW
BD88IJ7os3X1BI27Z51yFacDMqCrFeVsqaMFXPNqLbz9wFWa6tj8RHxEG8ngWxXZ
fnd6EU2+DV9CJ4RS7v7HO7LqokNYcGmo3mNmRq53dViYbIG6/ybv+J4YLixfAMzW
2tLBXZupd58+w8CLmu22sHzE1dj9ObzAR9otJN4bwiySAXMMLvxCrldLhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNQlP+Bu74xHzVgMD3Wu92b3QXaMB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoQpStyb
WBESejZPYzify1C1OgKlM+xjWLVk1gngfJARsZi5V4WeOfVz7XU8JjAGWqprW5tA
VcZjZRQAZndmTEUGl/bNZUEePO5Eulk4S7eqX5SMVon/kd4o4esVn6mRIptUe1iD
49sYJVXj7slzz6HUALx74fGf4YNbW9hOXDau0dwyTXucgSrQWmRyW39V10gfFNtQ
LxcV4QuecsmZq0SAOEF4Ab/auMyR2n+7UgJc4gsys1m4k+Tf7x1tn/Ibvd2jA2Fc
5qasG+whmfoA2a5BKmGnpo1roQTMYAawdaA67UXRgJqsXPjDyTZULhBmJDJykL8X
KU6e8PcbpGhPlA==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:47:27 2026 by rpki-client